Securing Cloudera on premises

Note: Cloudera's four-day administrator training course for Securing Cloudera on premises provides participants with a comprehensive understanding of all the steps necessary to operate and maintain on-premises clusters using Cloudera Manager.

1:1 Coaching

24*7 Support

Cloud Labs

High Success Rate

Globally Renowned Trainer

Real-time code analysis and feedback

Course Description

The Cloudera platform is intended to meet the most demanding technical audit standards. The significant improvements in Cloudera architecture and components make Cloudera “Secure by Design.” This four-day hands-on course is presented as a project plan for Cloudera administrators to build fully secured Cloudera clusters. The course begins with implementing Perimeter Security by installing host level security and Kerberos. Next, students protect Data by implementing Transport Layer Security using Auto-TLS and data encryption using Key Management System and Key Trustee Server (KMS/KTS). Following this, in the third stage, students control access for users and to data using Apache Ranger and Apache Atlas. The fourth stage focuses on visibility practices, teaching students how to audit systems, users, and data usage. Finally, the course introduces Cloudera practices for Risk Management in a fully secured Cloudera platform. This course is 60% exercise and 40% lecture.

Learning Objectives

Through instructor-led discussion and interactive, hands-on exercises, you will learn how to:

Architecture for secure Cloudera Clusters
Implementation of directory services: LDAP, KDC
Deployment of Auto-TLS and Kerberos
Theory and installation of: Apache Ranger, Apache Atlas, Ranger Key Management Service, Apache Knox Gateway

Building Ranger Resource Policies
Creating Atlas Classifications
Building Ranger Tag Policies

Certification Curriculum

Module 1

Cloudera Secure by Design

Cloudera Security Models
Cloudera Security Pillars
Cloudera Security Levels

Module 2

Project Planning for Cloudera

The Importance of Project Planning
Outline of Project Plan
Roles and Responsibilities of a Cloudera Administrator

Module 3

Directory Services

Comparing Directory Services
Lightweight Directory Access Protocol
FreeIPA or Active Directory

Module 4

Manage Identities on Cloudera

Identity Management Architecture
The purpose of PAM
Cloudera Manager and PAM

Module 5

Isolated Network

Architecture for Network Security
Building an Isolated Network

Module 6

Quality Controlled Hosts

Cloudera Requirements for Hosts
Recommendations for deployment hosts

Module 7

Protect Data in Motion

Theory for Security Protocols (TLS and SASL)
Tools: openssl and keytool
Architecture for Enterprise Certificate Authorities
Deploying TLS using Auto-TLS
Deploying SASL

Module 8

Authentication with Kerberos

Architecture for Kerberos
Kerberos CLI
Deploying Kerberos
Managing Cloudera services within Kerberos

Module 9

Shared Data Experience (SDX)

Architecture for Apache Ranger
Deploying Ranger
Deploying Infra Solr
Deploying Atlas

Module 10

Data at Rest

Theory for KMS/KTS
Deploying KMS/KTS
Encrypting Data at Rest

Module 11

Single Sign-On with Knox Gateway

Architecture for Knox Gateway
Installing Knox Gateway
Deploying Knox Gateway SSO
Accessing services through Knox Gateway

Module 12

Authorization with Ranger

Creating Ranger KMS Encryption Zones
Creating Ranger Security Zones
Creating Ranger resource policies

Module 13

Classify Data with Atlas

Ranger Policies for Atlas
Searching Atlas
Classifying Data with Tags
Creating Ranger Tag Policies
Creating Ranger Masking Policies

Module 14

Audit Cloudera

Auditing access on hosts
Auditing users with Ranger
Auditing lineage with Atlas

Module 15

Commission Cloudera

Validating Security Level 2
Checklist for commissioning Cloudera

Module 16

Achieving Compliance

Regulatory Compliance
Roadmap to Security Level 3

Prerequisites

This immersion course is designed for Linux Administrators transitioning to Cloudera Administrator roles. Students must have proficiency in Linux (e.g., navigating the file system, using basic commands) and Linux text editors (e.g., vi, nano). Familiarity with Directory Services, Transport Layer Security, Kerberos, and SQL select statements is recommended. Prior experience with Cloudera products is required. Students must have reliable internet access to connect to the classroom environments hosted on Amazon Web Services.

Download Brochure

We offer Administrator Training: Administering Cloudera on cloud Training in Singapore aimed at beginner Administering Cloudera that can lead to Administrator Training Certification. Download the brochure and check the different Focus Areas covered within these 4 days of training.

DOWNLOAD BROCHURE

Certification Assessment

When you complete the program, you’ll earn a Certificate to share with your professional network as well as unlock access to career support resources to help you kickstart your new career. Many Professional Certificates have hiring partners that recognize the Professional Certificate credential and others can help prepare you for a certification exam. You can find more information on individual Professional Certificate pages where it applies.

High Success rate
Join Our Dynamic Community
Training from Recognized Trainer
Post-workshop support by the Coaches

Testimonials

Our clients praise us for our great results, personable service, expert knowledge, and on-time delivery. Here are what just a few of them had to say:

Sarbojit Bose

The course is one of the two in the track of Agile Professional Coach. It is designed to provide both wide and deep knowledge to become a competent Coach with the additional skills of a Trainer and a Mentor. The two trainers, Preeth Panday and Naveen K Singh, are excellent Facilitators and Coaches with patience and promptness.

Tiong Yeow Tan

It was a good introductory course to agile coaching, providing a good overview and potential deep dive into other courses if one wishes to learn more about a particular topic. Trainer was able to address most of the questions from the participants and demonstrate coaching in his interaction with us.

Chun Ngee Boo Alson

The course is well structure. Timing is also right. The trainer Mr Raj is professional. And he asnwer all my question and doubts.

Puli

One of best I have encountered in my life. Freedom to interact and respond candidly and with courage for every question is not an easy task for Trainers which they did it exceptionally well.

Training FAQ's

Is this training conducted as an online/ virtual course?

As a response to the COVID-19, we have moved our classes online. Our Live Virtual format delivers the same benefits as our face-to-face training: expert instruction, hands-on labs and exercises, peer-to-peer collaboration, and high-quality instructional material.

If I cancel the enrollment, will I get a refund?

Cancellation requests received within 24 hours of registration would be offered a full refund (minus payment gateway charges), please reach out to our support team through drop a refund request to enquiry@agilitics.sg. Visit our page for more details about Cancellation & Refund Policy.

What Payment Options Are Available?

The process of enrolling for this classroom training is simple. The payment can be made through different options by using a debit/credit card which includes MasterCard, Visa Card, American Express or through PayPal. Acknowledgment will be issued automatically via email to the candidates once payment is done.

What are the modes of payment available for payment of accreditation fees?

Payment can be made via credit card, debit card, UPI, and internet banking.

Have more doubts?

Please send in an email to enquiry@agilitics.sg, and we will answer any queries you may have!

Trending Course

Leading Safe®️ 5.1

Cloudera Data Analyst

Certified Agile Coaching

We'd love
to hear from you

Send a message and we will be in touch within one business day.